accounts/api/tests/unit/components/Tokens/TokensFactoryTest.php

<?php
declare(strict_types=1);

namespace api\tests\unit\components\Tokens;

use api\components\Tokens\TokensFactory;
use api\tests\unit\TestCase;
use Carbon\Carbon;
use common\models\Account;
use common\models\AccountSession;
use League\OAuth2\Server\Entities\AccessTokenEntityInterface;
use League\OAuth2\Server\Entities\ClientEntityInterface;
use League\OAuth2\Server\Entities\ScopeEntityInterface;

class TokensFactoryTest extends TestCase {

    public function testCreateForAccount() {
        $factory = new TokensFactory();

        $account = new Account();
        $account->id = 1;

        // Create for account

        $token = $factory->createForWebAccount($account);
        $this->assertEqualsWithDelta(time(), $token->getClaim('iat'), 1);
        $this->assertEqualsWithDelta(time() + 60 * 60 * 24 * 7, $token->getClaim('exp'), 2);
        $this->assertSame('ely|1', $token->getClaim('sub'));
        $this->assertSame('accounts_web_user', $token->getClaim('scope'));
        $this->assertArrayNotHasKey('jti', $token->getClaims());

        $session = new AccountSession();
        $session->id = 2;

        // Create for account with remember me

        $token = $factory->createForWebAccount($account, $session);
        $this->assertEqualsWithDelta(time(), $token->getClaim('iat'), 1);
        $this->assertEqualsWithDelta(time() + 3600, $token->getClaim('exp'), 2);
        $this->assertSame('ely|1', $token->getClaim('sub'));
        $this->assertSame('accounts_web_user', $token->getClaim('scope'));
        $this->assertSame(2, $token->getClaim('jti'));
    }

    public function testCreateForOauthClient() {
        $factory = new TokensFactory();

        $client = $this->createMock(ClientEntityInterface::class);
        $client->method('getIdentifier')->willReturn('clientId');

        $scope1 = $this->createMock(ScopeEntityInterface::class);
        $scope1->method('getIdentifier')->willReturn('scope1');
        $scope2 = $this->createMock(ScopeEntityInterface::class);
        $scope2->method('getIdentifier')->willReturn('scope2');

        $expiryDateTime = Carbon::now()->addDay();

        // Create for auth code grant

        $accessToken = $this->createMock(AccessTokenEntityInterface::class);
        $accessToken->method('getClient')->willReturn($client);
        $accessToken->method('getScopes')->willReturn([$scope1, $scope2]);
        $accessToken->method('getExpiryDateTime')->willReturn($expiryDateTime);
        $accessToken->method('getUserIdentifier')->willReturn(1);

        $token = $factory->createForOAuthClient($accessToken);
        $this->assertEqualsWithDelta(time(), $token->getClaim('iat'), 1);
        $this->assertEqualsWithDelta($expiryDateTime->getTimestamp(), $token->getClaim('exp'), 2);
        $this->assertSame('ely|1', $token->getClaim('sub'));
        $this->assertSame('clientId', $token->getClaim('client_id'));
        $this->assertSame('scope1 scope2', $token->getClaim('scope'));

        // Create for client credentials grant

        $accessToken = $this->createMock(AccessTokenEntityInterface::class);
        $accessToken->method('getClient')->willReturn($client);
        $accessToken->method('getScopes')->willReturn([$scope1, $scope2]);
        $accessToken->method('getExpiryDateTime')->willReturn(Carbon::now()->subDay());
        $accessToken->method('getUserIdentifier')->willReturn(null);

        $token = $factory->createForOAuthClient($accessToken);
        $this->assertSame('no value', $token->getClaim('exp', 'no value'));
        $this->assertSame('no value', $token->getClaim('sub', 'no value'));
    }

    public function testCreateForMinecraftAccount() {
        $factory = new TokensFactory();

        $account = new Account();
        $account->id = 1;
        $clientToken = 'e44fae79-f80e-4975-952e-47e8a9ed9472';

        $token = $factory->createForMinecraftAccount($account, $clientToken);
        $this->assertEqualsWithDelta(time(), $token->getClaim('iat'), 5);
        $this->assertEqualsWithDelta(time() + 60 * 60 * 24 * 2, $token->getClaim('exp'), 5);
        $this->assertSame('minecraft_server_session', $token->getClaim('scope'));
        $this->assertNotSame('e44fae79-f80e-4975-952e-47e8a9ed9472', $token->getClaim('ely-client-token'));
        $this->assertSame('ely|1', $token->getClaim('sub'));
    }

}